Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2025-7257: IrfanView CADImage Plugin DXF File Can Cause Remote Code Execution

CVE-2025-7257 · published 1 year ago

Summary

If you use the IrfanView CADImage plugin to view DXF files from unknown sources, you may be at risk of allowing an attacker to take control of your computer. This is because the plugin doesn't properly check the files it opens, which can lead to a serious security issue. To stay safe, only open DXF files from trusted sources, and consider updating the plugin to the latest version.

What to do

Update cadsofttools cadimage to version 15.0.0.8 or later.

Affected software

Vendor	Product	Affected versions
cadsofttools	cadimage	< 15.0.0.8 `cpe:2.3:a:cadsofttools:cadimage::::::irfanview:x64:`

Original advisory text

IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

The specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26126.

References

https://www.zerodayinitiative.com/advisories/ZDI-25-503/ Third Party Advisory

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker full control

Severity

7.8 High

Exploitation

<1% chance of attack within 30 days

Type

CWE-119Buffer Overflow

Timeline

Published21 Jul 2025

Updated4 Nov 2026

First seen7 Mar 2026

Sources

CVE-2025-7257 · NVD

Track software like this

Free during beta